MCA Modern Desktop Administrator Study Guide: Exam MD-101

By William Panek

The must-have preparation guide for MCA Modern Desktop certification—covers the new Exam MD-101: Managing Modern Desktops!

Microsoft’s Modern Desktop integrates Windows 10, Office 365, and advanced security capabilities. Microsoft 365 Certified Associate (MCA) Modern Desktop certification candidates need to be familiar with Microsoft 365 workloads and demonstrate proficiency in deploying, configuring, and maintaining Windows 10 and non-Windows devices and technologies. The new Exam MD-101: Managing Modern Desktops measures candidate’s ability to deploy and update operating systems, manage policies and profiles, manage and protect devices, and manage apps and data. Candidates are required to know how to perform a range of tasks to pass the exam and earn certification.

The MCA Modern Desktop Administrator Study Guide: Exam MD-101 provides in-depth examination of the complexities of Microsoft 365. Focusing on the job role of IT administrators, this clear, authoritative guide covers 100% of the new exam objectives. Real-world examples, detailed explanations, practical exercises, and challenging review questions help readers fully prepare for the exam. Sybex's comprehensive online learning environment—in which candidates can access an assessment test, electronic flash cards, a searchable glossary, and bonus practice exams—is included to provide comprehensive exam preparation. Topics include:

• Planning and implementing Windows 10 using dynamic deployment and Windows Autopilot
• Upgrading devices to Windows 10 and managing updates and device authentication
• Managing access polices, compliance policies, and device and user profiles
• Implementing and managing Windows Defender and Intune device enrollment
• Deploying and updating applications and implementing Mobile Application Management (MAM)

The move to Windows 10 has greatly increased the demand for qualified and certified desktop administrators in corporate and enterprise settings. MCA Modern Desktop Administrator Study Guide: Exam MD-101: Managing Modern Desktops is an invaluable resource for IT professionals seeking MCA certification.

• Language: English
• Publisher: Wiley
• Release date: Mar 3, 2020
• ISBN: 9781119605959

Book preview

Introduction

This book was written from over 25 years of IT experience. I have taken that experience and translated it into a Windows 10 book that will help you not only prepare for the Microsoft 365 Certified: Modern Desktop Administrator Associate exams but also to develop a clear understanding of how to install and configure Windows 10 while avoiding all the possible configuration pitfalls.

Many Microsoft books just explain the Windows operating system, but with this book, I will go a step further, providing many in-depth, step-by-step procedures to support my explanations of how the operating system performs at its best.

Microsoft Windows 10 is the newest version of Microsoft's client operating system software. Microsoft has taken the best of Windows 7 and Windows 8 and combined them into the latest creation, Windows 10.

Windows 10 eliminates many of the problems that plagued the previous versions of Windows clients and it includes a much faster boot time and shutdown. It is also easier to install and configure, and it barely stops to ask the user any questions during installation. In this book, I will show you what features are installed during the automated installation and where you can make changes if you need to be more in charge of your operating system and its features.

This book takes you through all the ins and outs of Windows 10, including installation, configuration, online Microsoft subscriptions, auditing, backups, and so much more.

Windows 10 has improved on Microsoft's desktop environment, made networking easier, working with Microsoft Azure, enhanced search ability, improved performance—and that's only scratching the surface.

When all is said and done, this is a technical book for IT professionals who want to take Windows 10 to the next step and get certified. With this book, you will not only learn Windows 10 and hopefully pass the exams, you will also become a Windows 10 expert.

The Microsoft Certification Program

Since the inception of its certification program, Microsoft has certified more than two million people. As the computer network industry continues to increase in both size and complexity, this number is sure to grow—and the need for proven ability will also increase. Certifications can help companies verify the skills of prospective employees and contractors.

The Microsoft certification tracks for Windows include just some of the following certifications:

Microsoft 365 Certified: Modern Desktop Administrator Associate: Windows 10 The Microsoft 365 Certified: Modern Desktop Administrator Associate is now the highest-level certification you can achieve with Microsoft in relation to Windows 10. It requires passing exams MD-100 and MD-101. This book assists in your preparation for exam MD-101.

Microsoft Certified Technology Associate (MTA) This is Microsoft's newest certification program. This certification targets those new to the IT field and tests candidates on the core competencies necessary to become an IT professional.

How Do You Become Certified on Windows 10?

Attaining Microsoft certification has always been a challenge. In the past, students have been able to acquire detailed exam information—even most of the exam questions—from online brain dumps and third-party cram books or software products. For the new generation of exams, this is simply not the case.

Microsoft has taken strong steps to protect the security and integrity of its new certification tracks. Now prospective candidates must complete a course of study that develops detailed knowledge about a wide range of topics. It supplies them with the true skills needed, derived from working with the technology being tested.

The new generations of Microsoft certification programs are heavily weighted toward hands-on skills and experience. It is recommended that candidates have troubleshooting skills acquired through hands-on experience and working knowledge.

Fortunately, if you are willing to dedicate the time and effort to learn Windows 10, you can prepare yourself well for the exam by using the proper tools. By working through this book, you can successfully meet the requirements to pass the Windows 10 exams.

Microsoft 365 Certified: Modern Desktop Administrator Associate Exam Requirements

Candidates for MCSA certification on Windows 10 must pass two Windows 10 MCSA tests:

MD-100: Windows 10

MD-101: Managing Modern Desktops

Microsoft provides exam objectives to give you a general overview of possible areas of coverage on the Microsoft exams. Keep in mind, however, that exam objectives are subject to change at any time without prior notice and at Microsoft's sole discretion. Please visit the Microsoft Learning website (www.microsoft.com/learning) for the most current listing of exam objectives.

For a more detailed description of the Microsoft certification programs, including a list of all the exams, visit the Microsoft Learning website at www.microsoft.com/learning.

Types of Exam Questions

In an effort to both refine the testing process and protect the quality of its certifications, Microsoft has focused its latest certification exams on real experience and hands-on proficiency. There is a greater emphasis on your past working environments and responsibilities and less emphasis on how well you can memorize. In fact, Microsoft says that certification candidates should have hands-on experience before attempting to pass any certification exams.

Microsoft will accomplish its goal of protecting the exams’ integrity by regularly adding and removing exam questions, limiting the number of questions that any individual sees in a beta exam, limiting the number of questions delivered to an individual by using adaptive testing, and adding new exam elements.

Exam questions may be in a variety of formats: Depending on which exam you take, you'll see multiple-choice questions as well as select-and-place and prioritize-a-list questions. Simulations and case study–based formats are included as well. Let's take a look at the types of exam questions, so you'll be prepared for all of the possibilities.

Multiple-Choice Questions

Multiple-choice questions come in two main forms. One is a straightforward question followed by several possible answers of which one or more is correct. The other type of multiple-choice question is more complex and based on a specific scenario. The scenario may focus on several areas or objectives.

Select-and-Place Questions

Select-and-place exam questions involve graphical elements that you must manipulate to successfully answer the question. For example, you might see a diagram of a computer network. A typical diagram will show computers and other components next to boxes that contain the text Place here. The labels for the boxes represent various computer roles on a network, such as a print server and a file server. Based on information given for each computer, you are asked to select each label and place it in the correct box. You need to place all of the labels correctly. No credit is given for the question if you correctly label only some of the boxes.

In another select-and-place problem, you might be asked to put a series of steps in order by dragging items from boxes on the left to boxes on the right and placing them in the correct order. One other type requires that you drag an item from the left and place it under an item in a column on the right.

For more information on the various exam question types, go to www.microsoft.com/learning/mcpexams/policies/innovations.asp.

Simulations

Simulations are the kinds of questions that most closely represent actual situations and test the skills you use while working with Microsoft software interfaces. These exam questions include a mock interface on which you are asked to perform certain actions according to a given scenario. The simulated interfaces look nearly identical to what you see in the actual product.

Because of the number of possible errors that can be made on simulations, be sure to consider the following recommendations from Microsoft:

Do not change any simulation settings that don't pertain to the solution directly.

When related information has not been provided, assume that the default settings are used.

Make sure that your entries are spelled correctly.

Close all the simulation application windows after completing the set of tasks in the simulation.

The best way to prepare for simulation questions is to spend time working with the graphical interface of the product on which you will be tested.

Case Study–Based Questions

Case study–based questions first appeared in the MCSD program. These questions present a scenario with a range of requirements. Based on the information provided, you answer a series of multiple-choice and select-and-place questions. The interface for case study–based questions has a number of tabs, each of which contains information about the scenario. At present, this type of question appears only in most of the Design exams.

Tips for Taking the Windows 10 Exams

Here are some general tips for achieving success on your certification exam:

Arrive early at the exam center so that you can relax and review your study materials. During this final review, you can look over tables and lists of exam-related information.

Read the questions carefully. Do not be tempted to jump to an early conclusion. Make sure that you know exactly what the question is asking.

Answer all questions. If you are unsure about a question, mark it for review and come back to it at a later time.

On simulations, do not change settings that are not directly related to the question. Also, assume default settings if the question does not specify or imply which settings are used.

For questions that you're not sure about, use a process of elimination to get rid of the obviously incorrect answers first. This improves your odds of selecting the correct answer when you need to make an educated guess.

Exam Registration

At the time this book was released, Microsoft exams are given using more than 1,000 Authorized VUE Testing Centers around the world. For the location of a testing center near you, go to VUE's website at www.vue.com. If you are outside the United States and Canada, contact your local VUE registration center.

Find out the number of the exam you want to take, and then register with the VUE registration center nearest to you. At this point, you will be asked for advance payment for the exam. The exams are $165 each and you must take them within one year of payment. You can schedule exams up to six weeks in advance or as late as one working day prior to the date of the exam. You can cancel or reschedule your exam if you contact the center at least two working days prior to the exam. Same-day registration is available in some locations, subject to space availability. Where same-day registration is available, you must register a minimum of two hours before test time.

When you schedule the exam, you will be provided with instructions regarding appointment and cancellation procedures, ID requirements, and information about the testing center location. In addition, you will receive a registration and payment confirmation letter from VUE.

Microsoft requires certification candidates to accept the terms of a nondisclosure agreement before taking certification exams.

Who Should Read This Book?

This book is intended for individuals who want to earn their Microsoft 365 Certified: Modern Desktop Administrator Associate: Windows 10 certification.

This book will not only help anyone who is looking to pass the Microsoft exams, it will also help anyone who wants to learn the real ins and outs of the Windows 10 operating system.

What's Inside?

Here is a glance at what's in each chapter:

Chapter 1: Installing and Updating Windows 10 In the first chapter, I explain the requirements and steps to install and configure Windows 10. I will also show you the different versions of Windows 10. This chapter also shows you how to configure automated installation of Windows 10.

Chapter 2: Managing Authentication This chapter shows you how to configure user authorization and authentication. Understanding how users authenticate onto your network and Azure is one of the most important tasks that administrators must perform. I will also teach you how to manage user profiles.

Chapter 3: Managing Devices I show you how to implement conditional access and compliance policies for devices. I will show you how to configure device profiles and also how to plan and implement co-management between your on-site network with your Azure based network.

Chapter 4: Planning and Managing Microsoft Intune This chapter takes you through the different ways to manage Intune device enrollment and inventory. I will also show you how to deploy and update your applications. Finally, I will talk about implanting Mobile Application Management.

Chapter 5: Managing Security This chapter teaches you how to configure and manage Windows Defender. I will show you how to use Windows Defender Credential Guard, Windows Defender Exploit Guard, Windows Defender Advanced Threat Protection, Windows Defender Application Guard, and Windows Defender Antivirus.

Chapter 6: Configuring Auditing This chapter will show you how to monitor your different devices. I will also talk about how to monitor the health of your devices using Windows Analytics and cloud-based tools.

What's Included with the Book

There are many helpful items intended to prepare you for the Microsoft 365 Certified: Modern Desktop Administrator Associate certification included in this book:

Assessment Test There is an Assessment Test at the conclusion of the introduction that can be used to quickly evaluate where you are with Windows 10. This test should be taken prior to beginning your work in this book and should help you identify areas in which you are either strong or weak. Note that these questions are purposely more simple than the types of questions you may see on the exams.

Opening List of Objectives Each chapter includes a list of the exam objectives that are covered in that chapter.

Helpful Exercises Throughout the book, I have included step-by-step exercises of some of the more important tasks you should be able to perform. Some of these exercises have corresponding videos that can be downloaded from the book's website. Also, later in this introduction you'll find a recommended home lab setup that will be helpful in completing these tasks.

Video Resources After each chapter summary, if the chapter includes exercises with corresponding videos, a list or description of the exercises with video resources will be provided. The videos can be accessed at www.wiley.com/go/Sybextestprep.

Exam Essentials The end of each chapter also includes a listing of exam essentials. These are essentially repeats of the objectives, but remember that any objective on the exam blueprint could show up on the exam.

Chapter Review Questions Each chapter includes review questions. These are used to assess your understanding of the chapter and are taken directly from the chapter. These questions are based on of the exam objectives and are similar in difficulty to items you might actually receive on the MCSA: Windows 10 exams.

The Sybex Interactive Online Test Bank, flashcards, videos, and glossary can be accessed at www.wiley.com/go/Sybextestprep.

Interactive Online Learning Environment and Test Bank

The interactive online learning environment that accompanies the MCA Modern Desktop Administrator Study Guide, Exam MD-101 study guide provides a test bank with study tools to help you prepare for the certification exams and increase your chances of passing the exam the very first time! The test bank includes the following elements:

Sample Tests All of the questions in this book are provided, including the assessment test, which you'll find at the end of this introduction, and the chapter tests that include the review questions at the end of each chapter. In addition, there are two practice exams. Use these questions to test your knowledge of the study guide material. The online test bank runs on multiple devices.

Electronic Flashcards The flashcards are included for quick reference and are great tools for learning quick facts. You can even consider these as additional simple practice questions, which is essentially what they are.

Videos Some of the exercises include corresponding videos. These videos show you how the author does the exercises. There is also a video that shows you how to set up virtualization so that you can complete the exercises within a virtualized environment. I also have videos to help you on the Microsoft exams at www.youtube.com/c/williampanek.

PDF of Glossary of Terms There is a glossary included that covers the key terms used in this book.

Recommended Home Lab Setup

To get the most out of this book, you will want to make sure that you complete the exercises throughout the chapters. To complete the exercises, you will need one of two setups. First, you can set up a machine with Windows 10 and complete the labs using a regular Windows 10 machine.

The second way to set up Windows 10 is by using virtualization. I set up Windows 10 as a virtual hard disk (VHD) and I did all the labs this way. The advantages of using virtualization are that you can always just wipe out the system and start over without losing a real server. Plus, you can set up multiple virtual servers and create a full lab environment on one machine.

I created a video for this book showing you how to set up a virtual machine and how to install Windows 10 onto that virtual machine. This video can be seen at www.youtube .com/c/williampanek.

How to Contact Sybex or the Author

Sybex strives to keep you supplied with the latest tools and information you need for your work. Please check the website at www.wiley.com/go/Sybextestprep, where I'll post additional content and updates that supplement this book should the need arise.

You can contact Will Panek by going to his website at www.willpanek.com. Will Panek also has videos and test prep information located at www.youtube.com/c/williampanek. Will also has a Windows 10 Facebook page and a Twitter account @AuthorWillPanek.

Objective Mapping

Table I.1 contains an objective map to show you at-a-glance where you can find each objective covered.

Table I.1 MD-101 Objective Map

Assessment Test

You need to automatically register all the existing computers to the Azure AD network and also enroll all of the computers in Intune. What should you use?

Use a DNS Autodiscover address record.

Use a Windows Autopilot deployment profile.

Use an Autodiscover service connection point (SCP).

Set up a Group Policy Object (GPO).

You have a Windows 10 Windows Image (WIM) that is mounted. You need to view the list of third-party drivers installed on the WIM. What should you do?

Run DISM and specify the /get-drivers parameter.

Run Driverquery.exe and use the /si parameter.

From Device Manager, view all hidden drivers.

From Windows Explorer, open the mount folder.

You have a computer that runs Windows 10 Pro. The computer is joined to Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. You need to upgrade the computer to Windows 10 Enterprise for another user. What should you configure in Intune?

Windows Autopilot device profile

A device enrollment policy

A device cleanup rule

A device compliance policy

You decide to install Windows Deployment Services (WDS). You are using a Windows Server 2019 domain and have verified that your network meets the requirements for using WDS. What command-line utility can you use to configure the WDS server?

dism.exe

wdsutil.exe

setup.exe

The WDS icon in Control Panel

You have installed a clean installation of Windows 10 on your computer. You want to create an image of the new installation to use as a basis for remote installs. What Windows 10 utility should you use to accomplish this?

WDS

Windows SIM

DISM

Sysprep

You are the administrator in charge of a computer that runs both Windows 7 and Windows 10. Windows 10 is installed on a different partition from Windows 7. You have to make sure that the computer always starts Windows 7 by default. What action should you perform?

Run bcdedit.exe and the /default parameter.

Run bcdedit.exe and the /bootcd parameter.

Create a boot.ini file in the root of the Windows 10 partition.

Create a boot.ini file in the root of the Windows 7 partition.

An administrator wants to look at an Azure Active Directory application policy for your user's applications. What PowerShell command would you use to accomplish this task?

Add-AzureADPolicy

Add-AzureADApplicationPolicy

Create-AzurePolicy

Install-AzureADPolicy

Your boss has asked you about Azure security and making sure that user logins are secure. What feature can you explain to your boss to ease their concerns?

Azure AD User Security

Azure AD Identity Protection

Azure AD Security add-on

Azure Identity Protection

An administrator wants to change an Azure Active Directory policy for one of their users. What PowerShell command would you use to accomplish this task?

New-AzureADPolicy

Edit-AzureADPolicy

New-AzurePolicy

Set-AzureADPolicy

An administrator wants to view their Azure AD directory settings for the company's Azure AD subscription. What PowerShell command would you use to accomplish this task?

View-AzureADDirectorySetting

Get-AzureADDirectorySetting

Add-AzureADDirectorySetting

Set-AzureADDirectorySetting

You need to upgrade 100 Windows 10 Pro computers to Windows 10 Enterprise. What should you configure in Intune?

A device enrollment policy

A device cleanup rule

A device compliance policy

A device configuration profile

An administrator needs to create a device configuration profile in Microsoft Intune. You need to implement an ADMX-backed policy. Which profile type should you use?

Identity protection

Custom

Device restrictions

System restrictions

You need to set up a Windows 10 system in a break room where all employees can use it. Which device configuration profile type should you use?

Kiosk

Endpoint protection

Identity protection

Device restrictions

You have compressed a 4 MB file into 2 MB. You are copying the file to another computer that has a FAT32 partition. How can you ensure that the file will remain compressed?

When you copy the file, use the xcopy.exe command with the /comp switch.

When you copy the file, use the Windows Explorer utility and specify the option Keep Existing Attributes.

On the destination folder, make sure that you set the option Compress Contents To Save Disk Space in the folder's properties.

You can't maintain disk compression on a non-NTFS partition.

An administrator suspects that a problem in Windows 10 is related to the files being spread over the disk. What utility can be used to store the files contiguously on the disk?

Disk Defragmenter

Disk Manager

Disk Administrator

Disk Cleanup

When your users get added to Intune and get licensed, how many devices can each user use by default?

14

15

16

17

How do you allow your tablets to connect to your cell phones for Internet access?

Configure the broadband connection as a metered network.

Turn on cellular tethering.

Enable tablet tethering.

Enable tablet metering in the tablets settings.

An administrator needs to secure some of the Microsoft operating system's loopholes that hackers use. What type of updates would you need to install to help solve this problem?

Security Updates

Definition Updates

Critical Updates

Software Updates

You want to enable self-service password reset on the sign-in screen. Which settings should you configure from the Microsoft Intune blade?

Device configuration

Device compliance

Device enrollment

Conditional access

What do you need to do to be sure that all iOS devices can be managed by the Intune Administrators?

Add an Employee Portal app from the Apple App Store.

Create a device enrollment manager account.

Configure an Intune Service Connector for Exchange.

Import an Apple Push Notification service (APNs) certificate.

Your work computer network is protected by a firewall. You have configured your Windows 10 computer to use HTTPS. What port should you open on the firewall?

25

110

443

995

Your home computer network is protected by a firewall. You have configured your Windows 10 home computer to use Windows Mail. After you configure your email accounts, you discover that you are unable to send email messages from Windows Mail. Your email provider uses POP3 and SMTP. What port should you open on the firewall?

25

110

443

995

Your company is using Microsoft Azure Active Directory and all computers are enrolled in Microsoft Intune with EMS. The administrator needs to make sure that only approved applications are allowed to run on all of these computers. What should you implement to ensure this?

Windows Defender Credential Guard

Windows Defender Exploit Guard

Windows Defender Application Control

Windows Defender Antivirus

What two ports use FTP?

Ports 12 and 15

Ports 20 and 21

Ports 80 and 443

Ports 80 and 110

You have a Windows 10 machine that has a virus that was caused by a malicious font. You need to stop this type of threat from affecting your corporate computers in the future. What should you use?

Windows Defender Exploit Guard

Windows Defender Application Guard

Windows Defender Credential Guard

Windows Defender System Guard

What port does DNS use?

Port 20

Ports 25

Ports 53

Ports 80

The IT manager wants CPU utilization, disk utilization, and memory utilization all included in the data collected. How should you accomplish this?

Create a User Defined Data Collector set.

Create a custom performance set.

Create a Trace event.

Create a session Data Collector set.

You need to use a Microsoft Azure monitoring tool to monitor devices and change settings. Which of the following tools can you use?

Performance Monitor

Microsoft Azure IoT Central Application

Azure Performance Center

Intune Performance Center

You need to stop an application from running in Task Manager. Which tab would you use to stop an application from running?

Performance

Users

Options

Details

You have a computer named Portable1. You need to view the events collected from Portable1. Which query would an administrator run in Log Analytics?

Eventview | where SourceSystem = = Portable1

Eventview | where Computer = = Portable1

Event | where SourceSystem = = Portable1

Event | where Computer = = Portable1

Answers to Assessment Test

B. Windows Autopilot profiles allow an administrator to choose how the Windows 10 system will be set up and configured on Azure AD and Intune. See Chapter 1 for more information.

A. The DISM utility with the /get-drivers switch allows you to find out which drivers are installed on the WIM. See Chapter 1 for more information.

A. Windows Autopilot profiles allow an administrator to choose how the Windows 10 system will be set up and configured on Azure AD and Intune. See Chapter 1 for more information.

B. wdsutil.exe is a command-line utility that can be used to configure the WDS server. Several other configuration options need to be specified on the WDS server, and you can set them using wdsutil.exe. See Chapter 1 for more information.

C. You can use the DISM utility to create an image of a Windows 10 installation. After the image has been created, you can prepare the image with a utility such as the System Preparation Tool (Sysprep). The image can then be used for remote installations of Windows 10. See Chapter 1 for more information.

A. The Boot Configuration Data (BCD) store contains boot information parameters that were previously found in boot.ini in older versions of Windows. To edit the boot options in the BCD store, use the bcdedit utility, which can be launched only from a command prompt. See Chapter 1 for more information.

B. Administrators can use the Add-AzureADApplicationPolicy command to add an application policy. See Chapter 2 for more information.

B. Azure AD Identity Protection allows an Azure administrator to use the same type of protection that Microsoft uses to protect and secure users’ identities. See Chapter 2 for more information.

D. Administrators can use the Set-AzureADPolicy command to update an Azure AD policy. See Chapter 2 for more information.

B. Administrators can use the Get-AzureADDirectorySetting command to view their directory settings. See Chapter 2 for more information.

D. You can upgrade your devices by using a device configuration profile. The option that you want to configure is Edition Upgrade. Edition Upgrade allows